Production Improvements

cismet / cids-server-rest

1 stars 0 forks source link

Production Improvements #86

Closed helllth closed 7 years ago

helllth commented 7 years ago

Implement a couple of small improvements needed for productional use:

[x] anonymous or default user
[x] custom CORS header
[x] user whitelisting
[x] search whitelisting
[x] decide whether sensitive information is in the status API call or not

helllth commented 7 years ago

Example Config:

#anonymous user stuff
-anonymousUser=admin@WUNDA_BLAU
-anonymousPassword=leo

#CORS stuff
-corsAccessControlAllowOrigin=*
-corsAccessControlAllowMethods=GET, POST, DELETE, PUT, OPTIONS
-corsAccessControlAllowHeaders=Content-Type, Authorization

#user whitelisting
-allowedUsers=admin
-allowedUsers=hell

#search whitelisting
-allowedSearches=BPlanAPISearch
-allowedSearches=BPlanAPIGazeteerSearch

#hide sensitive information in status api call
-hideSensitiveInformation=false